Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/AAAE3D6A4E3911EE821C992A4AD9E6FC.roa
File: AAAE3D6A4E3911EE821C992A4AD9E6FC.roa (raw, json)
Hash identifier: RDQJu5PUFAu+oQhS2atlevX/B10HWoCC1AzBxiMzPbI=
Subject key identifier: 89:68:07:C0:AB:0A:2A:D3:4E:20:81:21:14:12:95:DF:E3:E2:14:7C
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0161
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/AAAE3D6A4E3911EE821C992A4AD9E6FC.roa
Signing time: Fri 08 Sep 2023 11:20:08 +0000
ROA not before: Fri 08 Sep 2023 11:20:05 +0000
ROA not after: Sat 07 Sep 2024 11:20:05 +0000
asID: 53356
IP address blocks: 66.251.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 8 11:20:05 2023 GMT
Not After : Sep 7 11:20:05 2024 GMT
Subject: CN=64fb0368-2f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:21:72:f7:7b:b4:b8:64:6a:6d:e5:6e:3b:
05:ab:2c:eb:0d:b0:ba:0e:ad:da:69:60:a0:0a:4a:
24:4b:5c:c7:cf:9d:28:39:d4:fe:82:8a:2b:8d:61:
13:da:3f:9e:e5:f7:fe:e0:ff:e0:f9:31:3a:b8:36:
35:d8:f7:b8:8a:fb:d0:41:fa:d9:b4:d8:f2:30:cb:
a6:19:c8:86:bb:12:b7:b1:39:d3:3e:d8:e1:9f:3b:
4a:53:46:56:3c:af:2b:c1:a7:57:3b:85:02:39:34:
28:a2:bb:ef:a2:92:5a:51:5b:63:6b:27:ef:f9:49:
cb:a0:25:4c:4e:9b:31:6a:7d:60:fd:df:eb:20:c6:
a5:86:64:3e:b6:51:43:36:5b:d9:c9:94:de:a6:7a:
56:52:9f:0f:db:9c:5d:3c:f7:5e:4e:2f:fc:88:07:
9d:48:7e:bd:40:95:8d:01:13:0e:82:c1:e6:0b:30:
9e:1e:72:55:f9:d1:3f:9a:c2:28:05:63:09:00:c1:
fd:53:44:25:cf:1b:c3:ab:43:b5:1d:8b:a5:3f:a7:
a9:34:84:78:65:96:7d:d5:c7:65:a1:8d:55:c1:42:
04:55:e6:98:ad:c2:c3:c9:b5:1c:8a:8f:08:47:fe:
c8:8c:43:20:3c:30:d4:5f:74:d7:88:88:f7:ce:39:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:07:C0:AB:0A:2A:D3:4E:20:81:21:14:12:95:DF:E3:E2:14:7C
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/AAAE3D6A4E3911EE821C992A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.131.0/24
Signature Algorithm: sha256WithRSAEncryption
24:eb:ee:f7:24:fd:72:49:e4:29:64:b3:da:41:02:ac:00:6f:
a5:14:98:41:ad:1e:f4:4a:68:bd:0d:74:bd:5b:be:72:3f:2c:
58:08:e6:b0:04:32:32:e7:a9:0a:03:3a:ec:a0:03:69:88:c6:
bd:19:3e:2e:06:63:1d:fd:9b:cd:69:10:47:26:68:04:d4:3f:
e5:93:00:31:eb:09:53:a6:42:d2:e7:48:67:18:e4:4e:92:e5:
f0:ba:20:2b:fb:8c:84:cd:0b:ef:b9:6c:a5:fd:d8:67:0d:78:
7c:b6:39:f7:de:e0:89:c1:61:01:1f:88:a8:9a:4b:f4:1f:e1:
a5:3e:83:87:98:3c:69:10:33:41:6e:1d:71:56:92:74:17:68:
fb:5e:3b:da:b0:bd:19:4b:d6:5a:1f:7d:fd:5e:e8:1d:80:6f:
3d:d7:80:a8:e7:9b:d3:07:15:c1:f9:aa:84:9e:77:cc:ee:06:
8f:fb:aa:bf:d7:c7:ed:c2:01:eb:db:04:15:ed:c2:14:d5:0e:
4c:30:cc:24:1b:cb:12:a2:26:0d:a5:6d:b0:18:7b:d6:00:2d:
9c:d6:43:53:40:8b:19:69:59:7c:6e:82:72:7b:7c:60:61:7d:
cd:f7:cc:ff:e2:12:ed:3b:68:eb:a2:4c:b4:f7:e9:25:aa:27:
52:1a:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org